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Message From the Attorney General 


T: investigation conducted at the scene of an explosion or bombing 
plays a vital role in uncovering the truth about the incident. The 
evidence recovered can be critical in identifying, charging, and ultimately 
convicting suspected criminals. For this reason, it is absolutely essential 
that the evidence be collected in a professional manner that will yield 
successful laboratory analyses. One way of ensuring that we, as investi- 
gators, obtain evidence of the highest quality and utility is to follow 
sound protocols in our investigations. 


Recent cases in the criminal justice system have brought to light the need 
for heightened investigative practices at all crime scenes. In order to raise 
the standard of practice in explosion and bombing investigations of both 
small and large scale, in both rural and urban jurisdictions, the National 
Institute of Justice teamed with the National Center for Forensic Science 
at the University of Central Florida to initiate a national effort. Together 
they convened a technical working group of law enforcement and legal 
practitioners, bomb technicians and investigators, and forensic laboratory 
analysts to explore the development of improved procedures for the 
identification, collection, and preservation of evidence at explosion and 
bombing scenes. 


This Guide was produced with the dedicated and enthusiastic participa- 
tion of the seasoned professionals who served on the Technical Working 
Group for Bombing Scene Investigation. These 32 individuals brought 
together knowledge and practical experience from Federal law enforce- 
ment agencies—as well as from large and small jurisdictions across the 
United States—with expertise from national organizations and abroad. 

I applaud their efforts to work together over the course of 2 years in 
developing this consensus of recommended practices for public safety 
personnel. 


In developing its investigative procedures, every jurisdiction should give 
careful consideration to those recommended in this Guide and to its own 
unique local conditions and logistical circumstances. Although factors 
that vary among investigations may call for different approaches or even 
preclude the use of certain procedures described in the Guide, consider- 
ation of the Guide's recommendations may be invaluable to a jurisdic- 
tion shaping its own protocols. As such, A Guide for Explosion and 
Bombing Scene Investigation is an important tool for refining investiga- 
tive practices dealing with these incidents, as we continue our search 
for truth. 


Janet Reno 


Message From the President of the University of 


Central Florida 


Т: University of Central Florida (UCF) is proud to take a 
leading role in the investigation of fire and explosion scenes 
through the establishment of the National Center for Forensic Science 
(NCFS). The work of the Center's faculty, staff, and students, in coop- 
eration with the National Institute of Justice (NIJ), has helped produce 
the NIJ Research Report A Guide for Explosion and Bombing Scene 


Investigation. 


More than 150 graduates of UCF's 25-year-old program in forensic 
science are now working in crime laboratories across the country. Our 
program enjoys an ongoing partnership with NIJ to increase knowledge 
and awareness of fire and explosion scene investigation. We anticipate 
that this type of mutually beneficial partnership between the university, 
the criminal justice system, and private industry will become even more 
prevalent in the future. 


As the authors of this Guide indicate, the field of explosion and bombing 
investigation lacks nationally coordinated investigative protocols. NCFS 
recognizes the need for this coordination. The Center maintains and 
updates its training criteria and tools so that it may serve as a national 
resource for public safety personnel who may encounter an explosion 

or bombing scene in the line of duty. 


I encourage interested and concerned public safety personnel to use A 
Guide for Explosion and Bombing Scene Investigation. The procedures 
recommended in the Guide can help to ensure that more investigations 
are successfully concluded through the proper identification, collection, 
and examination of all relevant forensic evidence. 


Dr. John C. Hitt 


Technical Working Group for Bombing Scene Investigation 


T he Technical Working Group for Bombing Scene Investigation 
(TWGBSD) is a multidisciplinary group of content area experts 
from the United States, Canada, and Israel, each representing his or her 
respective agency or practice. Each of these individuals is experienced in 
the investigation of explosions, the analysis of evidence gathered, or the 
use in the criminal justice system of information produced by the investi- 
gation. They represent such entities as fire departments, law enforcement 
agencies, forensic laboratories, private companies, and government 


agencies. 


At the outset of the TWGBSI effort, the National Institute of Justice 
(NIJ) and the National Center for Forensic Science (NCFS) created the 
National Bombing Scene Planning Panel (NBSPP)—composed of distin- 
guished law enforcement officers, representatives of private industry, and 
researchers—to define needs, develop initial strategies, and steer the larger 
group. Additional members of TWGBSI were then selected from recom- 
mendations solicited from NBSPP; NIJ’s regional National Law Enforce- 
ment and Corrections Technology Centers; and national organizations and 
agencies such as the Federal Bureau of Investigation, the Bureau of Alcohol, 
Tobacco and Firearms, the American Society of Crime Laboratory Direc- 
tors, and the National District Attorneys Association. 


Collectively, over a 2-year period, the 32 members of TWGBSI listed 
below worked together to develop this handbook, A Guide for Explosion 


and Bombing Scene Investigation. 


National Bombing Scene Planning Panel of TWOBSI 


Joan K. Alexander Roger E. Broadbent John A. Conkling, Ph.D. 

Office of the Chief State’s Virginia State Police American Pyrotechnics 
Attorney Fairfax, Virginia Association 

Rocky Hill, Connecticut Chestertown, Maryland 
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Introduction 


"I had imagined that Sherlock Holmes would have at once hurried 
into the house and plunged into a study of the mystery. Nothing 
appeared to be further from his intention. He lounged up and 
down the pavement and gazed vacantly at the ground, the sky, the 
opposite houses. Having finished his scrutiny, he proceeded slowly 
down the path, keeping his eyes riveted on the ground.” 


Dr. Watson 

A Study in Scarlet 

Sir Arthur Conan Doyle 
Sherlock Holmes, the master of detectives, considered it essential to be 
excruciatingly disciplined in his approach to looking for evidence at a 
crime scene. While it is imperative that all investigators apply discipline 
in their search for evidence, it is apparent that few do so in the same way. 
Currently, there are no nationally accepted guidelines or standard practices 
for conducting explosion or bombing scene investigations. Professional 
training exists through Federal, State, and local agencies responsible for 
these investigations, as well as through some organizations and academic 
institutions. The authors of this Guide strongly encourage additional 
training for public safety personnel. 


Purpose and Scope 


The principal purpose of this Guide is to provide an investigative outline 
of the tasks that should be considered at every explosion scene. They will 
ensure that proper procedures are used to locate, identify, collect, and 
preserve valuable evidence so that it can be examined to produce the 
most useful and effective information—best practices. This Guide was 
designed to apply to explosion and bombing scene investigations, from 
highly complex and visible cases, such as the bombing of the Alfred P. 
Murrah Federal Building in Oklahoma City, to those that attract less 
attention and fewer resources but may be just as complex for the investi- 
gator. Any guide addressing investigative procedures must ensure that 


each contributor of evidence to Ше forensic laboratory system is served 
by the guide and that quality examinations will be rendered. Consistent 
collection of quality evidence in bombing cases will result in more 
successful investigations and prosecutions of bombing cases. While 

this Guide can be useful to agencies in developing their own procedures, 
the procedures included here may not be deemed applicable in every 
circumstance or jurisdiction, nor are they intended to be all-inclusive. 


Statistics on Bombings and Other 
Explosives-Related Incidents 


The principal Federal partners in the collection of data related to explo- 
sives incidents in the United States are the Bureau of Alcohol, Tobacco 
and Firearms (ATF), the Federal Bureau of Investigation (ЕВО, the U.S. 
Postal Inspection Service (USPIS), and the U.S. Fire Administration 
(USFA). These Federal partners collect and compile information sup- 
plied by State and local fire service and law enforcement agencies 
throughout the United States and many foreign countries. 


According to ATF and FBI databases, there were approximately 38,362 
explosives incidents from 1988 through 1997 (the latest year for which 
complete data were available) in the United States, including Guam, 
Puerto Rico, and the U.S. Virgin Islands. Incident reports received by 
ATF and the FBI indicate that the States with the most criminal bombing 
incidents are traditionally California, Florida, Illinois, Texas, and Wash- 
ington. Criminal bombings and other explosives incidents have occurred 
in all States, however, and the problem is not limited to one geographic 
or demographic area of the country. 


The number of criminal bombing incidents (bombings, attempted 
bombings, incendiary bombings, and attempted incendiary bombings) 
reported to ATF, the FBI, and USPIS fluctuated in the years 1993-97, 
ranging between 2,217 in 1997 and 3,163 in 1994. Incendiary incidents 
reached a high of 725 in both 1993 and 1994. Explosives incidents 


reached a high of 2,438 in 1994 and a low of 1,685 in 1997. It is impor- 
tant to note that these numbers reflect only the incidents reported to 
Federal databases and do not fully reflect the magnitude of the problem 
in the United States. 


Of the criminal bombing incidents reported during 1993—97, the top 
three targets—collectively representing approximately 60 percent of 
the incidents—were residential properties, mailboxes, and vehicles. 
Motives are known for about 8,000 of these incidents, with vandalism 
and revenge by far cited most frequently. 


The most common types of explosive/incendiary devices encountered 
by fire service and law enforcement personnel in the United States are 
traditionally pipe bombs, Molotov cocktails, and other improvised 
explosive/incendiary devices. The most common explosive materials 
used in these devices are flammable liquids and black and smokeless 
powder. 


Stolen explosives also pose a significant threat to public safety in the 
United States. From 1993 to 1997, more than 50,000 pounds of high 
explosives, low explosives, and blasting agents and more than 30,000 
detonators were reported stolen. Texas, Pennsylvania, California, 
Tennessee, and North Carolina led the Nation in losses, but every State 
reported losses. 


Further information, including updated and specific statistical informa- 
tion, can be obtained by contacting the ATF Arson and Explosives 
National Repository at 800—461—8841 or 202-927-4590, through its 
Web site at http://ows.atf.treas.gov:9999, or by calling the FBI Bomb 
Data Center at 202-324-2696. 


Background 


National Bombing Scene Planning Panel (NBSPP) 


The National Center for Forensic Science (NCFS) at the University of 
Central Florida (UCF) in Orlando, a grantee of the National Institute of 
Justice (NIJ), held a National Needs Symposium on Arson and Explo- 
sives in August 1997. The symposium's purpose was to identify problem 
areas associated with the collection and analysis of fire and explosion 
debris. One of the problem areas identified was the need for improved, 
consistent evidence recognition and handling procedures. 


In spring 1998, NIJ and NCFS, using NIJ's template for creating techni- 
cal working groups, decided to develop guidelines for fire/arson and 
explosion/bombing scene investigations. The NIJ Director selected 
members for a planning group to craft the explosion/bombing investiga- 
tion guidelines—NBSPP. At the same time, the NIJ Director selected a 
fire/arson planning panel. The nine NBSPP members represent national 
and international organizations whose constituents are responsible for 
investigating explosion and bombing scenes and evaluating evidence 
from these investigations. The group also includes one academic re- 
searcher. The rationale for their involvement was twofold: 


€ They represent the diversity of the professional discipline. 


@ Each organization is a key stakeholder in the conduct of explosion 
and bombing investigations and the implementation of this Guide. 


NBSPP was charged with developing an outline for national guidelines 
for explosion and bombing scene investigations—using the format 

in the NIJ publication Death Investigation: A Guide for the Scene 
Investigator! as a template—and identifying the expertise composition of 
a technical working group for explosion/bombing scene investigations. 
This task was completed in March 1998 at a meeting at NCFS; the 
results are presented here. 


Technical Working Group for Bombing Scene 
Investigation (TWGBSI) 


Candidates for TWGBSI were recommended by national law enforce- 
ment, prosecution, forensic sciences, and bomb technician organizations 
and commercial interests and represented a multidisciplinary group of 
both national and international organizations. These individuals are all 
content area experts who serve within the field every day. The following 
criteria were used to select the members of TWGBSI: 


€ Each member was nominated/selected for the position by NBSPP 
and NCES. 


€ Each member had specific knowledge regarding explosion and 
bombing investigation. 


€ Each member had specific experience with the process of explosion 
and bombing investigation and the outcomes of positive and negative 
scene investigations. 


€ Each member could commit to the project for the entire period. 


The 32 experts selected as members of TWGBSI came from 3 countries 
(the United States, Canada, and Israel), 13 States, and the District of 
Columbia. Because this technical working group dealt with explosion 
and bombing scenes, a large portion of investigators and analysts repre- 
sented ATF and the FBI. The geographical distribution of TWGBSI 
members is shown in exhibit 1. 


Chronology of Work 


NBSPP meeting. In March 1998, the panel met at UCF, under the sponsor- 
ship of NCFS, to review the existing literature and technologies, prepare 
the project objectives, and begin the guideline development process. The 
panel’s objective was to develop an outline for a set of national guidelines 
based on existing literature and present them for review to the assembled 
TWGBSI at a later date. During this initial session, five investigative tasks 
were identified. Each task included subsections that, when developed, 
provided a template of procedures for investigators to follow while 
conducting an explosion or bombing investigation. 


Exhibit 1. Technical Working Group for Bombing Scene Investigation 
Membership Distribution 


> Israel 


Northeast 


ШІ Southeast 


Rocky Mountain 


+ Law Enforcement ш Prosecutors West 
е Laboratory Staff = Researchers 
A Practitioners 
Region Number of Participants 
Northeast 20 
Southeast 8 
Rocky Mountain 1 
West 1 
International 2 


The completed Guide includes the following components: 


Ф A principle citing the rationale for performing the task. 
Ф The procedure for performing the task. 
Ф A summary outlining the principle and procedure. 


TWGBSI assembled in August 1998. After introductory remarks from 
the president of UCF, TWGBSI separated into five breakout sections to 
draft the Guide, which includes the following stages: 


Ф Prioritizing initial response efforts. 


Ф Evaluating the scene. 


Ф Documenting the scene. 
€ Processing evidence at Ше scene. 
Ф Completing and recording the scene investigation. 


Once all breakout groups completed their work, the full group reas- 
sembled to review and approve the initial draft. Editors from an NIJ 
contractor attended each section to record the proceedings and guide 
the editorial process. After the meeting, the editors reformatted the 
initial draft and forwarded it to an agency representative so that it 
could be sent to all TWGBSI members for comment. 


Organizational review and national reviewer network. After the 
TWGBSI comments were received by NIJ, NBSPP met in November 
and December 1998 in Washington, D.C., to consider and incorporate 
the comments, creating the second draft of the Guide. In addition, 
NBSPP members recommended organizations, agencies, and individuals 
they felt should comment on the draft document, which was mailed to 
all TWGBSI members and to this wider audience in June 1999. The 150 
organizations and individuals whose comments were solicited during 
the national review of this Guide included all levels of law enforcement, 
regional and national organizations, and bomb response units from the 
United States, Canada, and other nations. A list of reviewers can be 
found in appendix C. 


NBSPP members reassembled in August 1999 to incorporate the com- 
ments received from the initial wide review. Following this meeting, a 
third draft of the Guide was sent to all TWGBSI members for discussion 
and review within their organizations and agencies. In October 1999, the 
TWGBSI members met to review and recommend changes to this third 
draft. Another national and organizational review followed, and results 
were discussed by TWGBSI at a meeting in January 2000. What follows 
is the final consensus document resulting from the final meeting. 


Training 


For each of the procedures presented in this Guide, training criteria will 
be developed and approved by NCFS’s Technical Working Group on Fire 
and Explosions. These criteria will provide individuals and educational 
organizations with an additional resource for providing comprehensive 
instruction to public safety personnel. A current listing of institutions 
that can provide training in the area of explosion/bombing investigation 
can be obtained from NCFS (see appendix D). 


Authorization 


Federal, State, and local statutory authority in explosion and bombing 
cases is enforced by the agencies responsible for the specific incident 

and varies greatly depending on the specific location and nature of the 
incident. 


Note 


1. Death Investigation: A Guide for the Scene Investigator, Research 
Report, Washington, D.C.: U.S. Department of Justice, National Institute 
of Justice, December 1997, NCJ 167568. 
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ЕТТЕ Procuring Equipment and Tools 


УТ ЛИП. Prioritizing Initial Response Efforts 


Evaluating the Scene 


Documenting the Scene 


Processing Evidence at the Scene 


Completing and Recording the Scene 
Investigation 
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This handbook is intended as a guide to recommended practices 
for the identification, collection, and preservation of evidence at 
explosion and bombing scenes. Jurisdictional, logistical, or legal 
conditions may preclude the use of particular procedures contained 


here. Not every portion of this document may be applicable to all 


explosion and bombing scenes. The investigator will determine the 
applicability of these procedures to a particular incident. 


Section А. Procuring Equipment and Tools 


Possessing the proper tools and equipment is key to any task, and never 
more so than in emergency situations such as explosion or bombing 
scenes. Because responders and investigators may not know the details 
of the situation until arriving at the scene, prior preparation is vital. 
Following is a list of equipment and tools frequently used by the investi- 


gative team at explosion and bombing scenes. Equipment and tool needs 
are, for the most part, determined by the actual scene. The list below may 
be used as a planning guide for equipment and tool needs. Not every item 
and tool mentioned below will be applicable for use on every scene. 
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Biohazard materials (1.е., bags, tags, labels). 

First-aid kit. 

Footwear, safety (1.е., protective shoes/boots). 

Glasses, safety. 

Gloves, heavy and disposable (e.g., surgical, latex). 

Helmets, safety/hard hats. 

Kneepads. 

Outerwear, protective (e.g., disposable suits, weather gear). 
Personnel support items (e.g., food, water, hygiene items, shelter). 


Reflective tape. 


Ф + + + + + + ++ + Ф + 


Respiratory equipment (e.g., particle masks, breathing equipment). 


ћ 


General Crime Scene Тооіз/ Equipment 


Ф 


Ф + + + 


е + + + + + Ф + + Ф 


Barrier tape/perimeter rope. 

Batteries. 

Binoculars. 

Communications equipment (e.g., telephone, two-way radio). 


Evidence collection kits (e.g., latent print, bodily fluid, impression, 
tool mark, trace evidence). 


Flares. 

Flashlights. 

Generators. 

Handtools (e.g., screwdrivers, crowbars, hammers). 
Knives, utility. 

Lighting, auxiliary. 

Tarps/tents. 

Thermometer. 

Trashcans, large. 


Tweezers/forceps. 


Scene Documentation 


е + + + 


Compass. 

Computer and computer-aided design (CAD) program. 
Consent-to-search forms. 

Drawing equipment (e.g., sketchbooks, pencils). 


Logs (e.g., evidence recovery, photo). 


Measuring equipment (e.g., forensic mapping station, tape measure, 
tape wheel). 


Photographic equipment (e.g., 35mm camera, Polaroid camera, 
videocamera, digital camera, film, lenses, tripods). 


Tape recorder and cassettes. 


Writing equipment (e.g., notebooks, pens, permanent markers). 


Evidence Collection 


Ф + + + + + + + + + Ф ++ + Фе + + Фе + 


Bags, new (e.g., sealable, nylon). 

Boxes, corrugated/fiberboard. 

Brushes and brooms. 

Cans, new (e.g., unlined). 

Evidence flags/cones. 

Evidence placards. 

Evidence tags. 

Evidence sealing tape. 

Gloves (1.е., disposable cotton, disposable latex). 
Grid markers. 

Heat sealer. 

Magnets. 

Outerwear, protective (e.g., disposable suits, shoe covers). 
Rakes, spades, and shovels. 

Sifters/screens. 

Swabbing kits. 

Trowels. 


Vacuum. 
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Specialized Equipment 


Aerial survey/photography equipment (e.g., helicopter). 
Chemical test kits and vapor detectors. 


Construction equipment, heavy. 


GPS (global positioning system) equipment. 


* 

Ф 

+ 

€ FExtrication/recovery equipment. 
* 

Ф Ladders. 

Ф 


Trace explosives detectors (e.g., sniffers) and/or detection canines. 


Section В. Prioritizing Initial Response Efforts 


Note: Safety concerns should be continually addressed beginning with 
the initial response effort. Implementation of the procedures in this 
section will be determined by the scene circumstances. 


| Conduct а Preliminary Evaluation 
of the Scene 


Principle: First responders (the first public safety personnel to 


arrive at the scene, whether law enforcement officers, 
firefighters, or emergency medical services (EMS) 
personnel) must assess the scene quickly yet thoroughly 
to determine the course of action to be taken. This 
assessment should include the scope of the incident, 
emergency services required, safety concerns, and 
evidentiary considerations. 


Procedure: Upon arrival at the scene, first responders should: 


A. Establish a command post/implement an incident command 
system (i.e., a point of contact and line of communication and 
authority for other public safety personnel). 


B. Request emergency services from bomb technicians, firefighters, 
EMS personnel, and law enforcement officers. 


C. Identify scene hazards, such as structural collapse, blood- 
borne pathogens, hazardous chemicals, and secondary 
explosive devices. 


D. Identify witnesses, victims, and the presence of evidence. 


E. Preserve potentially transient physical evidence (e.g., evidence 
present on victims, evidence that may be compromised by 
weather conditions). 
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DANGER: Beware of secondary devices! 

The scene may contain secondary explosive devices designed specifically 
to kill or maim public safety responders. Do not touch any suspicious 
items. If a suspected secondary device is located, immediately evacuate 
the area and contact bomb disposal personnel. 


Summary: 


о. 


Principle: 


Procedure: 


Based on the preliminary evaluation, first responders 
will initiate an incident command system, request 
emergency services, and identify scene hazards and 
evidentiary concerns. 


Exercise Scene Safety 


Safety overrides all other concerns. First responders 
must take steps to identify and remove or mitigate safety 
hazards that may further threaten victims, bystanders, 
and public safety personnel. They must exercise due 
caution while performing emergency operations to avoid 
injuries to themselves and others. 


Following the preliminary evaluation of the scene, first 
responders should: 


A. Request additional resources and personnel (e.g., bomb techni- 


cians, building inspectors, representatives from utility companies, 


such as gas, water, and electric) to mitigate identified hazards. 


B. Use tools and personal protective equipment appropriate to the 


task during all operations. 


C. Request and/or conduct a safety sweep of the area by personnel 


qualified to identify and evaluate additional hazards and safety 


concerns. 


D. Mark hazard areas clearly and designate safety zones to receive 


victims and evacuees. 


Summary: 


5. 


Principle: 


Procedure: 


To ensure safety, first responders will take steps to 
identify, evaluate, and mitigate scene hazards and 
establish safety zones. 


Administer Lifesaving Efforts 


First responders’ primary responsibility is to rescue 
living victims and provide treatment for life-threatening 
injuries. While performing emergency operations, they 
are to preserve evidence and avoid disturbing areas not 
directly involved in the rescue activities, including those 
areas containing fatalities. 


After performing a preliminary evaluation and establish- 
ing scene safety, first responders should: 


A. Initiate rescues of severely injured and/or trapped victims. 


B. Evacuate ambulatory victims, perform triage, and treat life- 


threatening injuries. 


C. Leave fatalities and their surroundings undisturbed. Removal of 


fatalities will await authorization. 


D. Avoid disturbing areas not directly involved in rescue activities. 


Summary: 


4 


Principle: 


Lifesaving efforts are first responders' priority. Addition- 
ally, care should be taken not to disturb areas where 
rescue activities are not taking place. 


Establish Security and Control 


First responders will establish control and restrict scene 
access to essential personnel, thereby aiding rescue 
efforts and scene preservation. First responders will 
initiate documentation. 
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Procedure: To establish security and control, first responders should: 


A. Set up a security perimeter. 


B. Restrict access into and out of the scene through the security 
perimeter (e.g., control media, bystanders, nonessential 
personnel). 


C. Establish staging areas to ensure that emergency vehicles have 
access into the area. 


D. Initiate documentation of the scene as soon as conditions permit 
(e.g., taking notes, identifying witnesses, videotaping/photo- 
graphing bystanders). 


Summary: First responders will establish a controlled security 
perimeter, designate staging areas, and initiate 
documentation. This will set the stage for the 
subsequent investigation. 


Section С. Evaluating the Scene 


Note: At the time the scene is determined to involve a bombing or other 
crime, the investigator must address legal requirements for scene 
access, search, and evidence seizure. 


| Define the Investigator Role 


Principle: The investigator must coordinate with the incident 
commander and first responders to determine what 
occurred and to assess the current situation. Subsequent 
procedures will vary depending on the magnitude of the 
incident. 


Procedure: Upon arriving at and prior to entering the scene, the 
investigator should: 


A. Identify and introduce himself or herself to the incident 
commander. 


B. Interview the incident commander and first responders to evaluate 
the situation, including safety concerns, and determine the level 
of investigative assistance needed. 


C. Conduct a briefing with essential personnel (e.g., law enforce- 
ment, fire, EMS, hazardous materials, and utility services 
personnel) to: 


€ Evaluate initial scene safety to the extent possible prior to 
entry. 


€ Ensure that a search for secondary explosive devices has 
been conducted. 


Caution: Only bomb disposal personnel should handle any suspected 
devices that are located. Take no further action until the devices have 
been identified or rendered safe. 
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€ Ensure that Ше scene has been secured, that a perimeter and 
staging areas for the investigation have been established, and 
that all personnel have been advised of the need to prevent 
contamination of the scene. 


€ Ensure that the chain of custody is initiated for evidence that 
may have been previously collected. 
D. Assess legal considerations for scene access (e.g., exigent circum- 
stances, consent, administrative/criminal search warrants). 


Summary: The investigator will conduct a briefing to ensure scene 
safety and security, while addressing the issue of second- 
ary devices. 


A Ensure Scene Integrity 


Principle: The investigator must ensure the integrity of the scene 
by establishing security perimeters and staging areas, 
contamination control procedures, and evidence collec- 
tion and control procedures. 


Procedure: Prior to evidence collection, the investigator should: 
A. Establish procedures to document personnel entering and exiting 


the scene. 


B. Establish and document procedures to prevent scene contamina- 
tion. 


C. Establish and document procedures for evidence collection, 
control, and chain of custody (see the sample evidence recovery 
and chain of custody logs in appendix A). 


Summary: The investigator will establish and document procedures 
to protect the integrity of the scene. 


00 


5. 


Principle: 


Procedure: 


Conduct ће Scene Walkthrough 


The investigator must conduct a walkthrough to estab- 
lish scene parameters and acquire an overview of the 
incident. 


During the scene walkthrough, the investigator should: 


A. Reevaluate scene requirements (e.g., boundaries, personnel, 


equipment). 


B. Establish an entry and exit path for personnel. 


C. Be alert to safety concerns (e.g., structural damage, secondary 


devices, unconsumed explosive materials, failed utilities, hazard- 


ous materials) and to the locations of physical evidence. 


D. Ensure preservation and/or collection of transient evidence. 


E. Attempt to locate the seat(s) of the explosion(s). 


Summary: 


4 


Ргіпсіріе: 


Procedure: 


The investigator's initial walkthrough will be an opportu- 
nity to identify evidence and the presence of safety 
hazards. 


Secure Required Resources 


Following the walkthrough, the investigator should meet 
with available emergency responders and investigative 
personnel to determine what resources, equipment, and 
additional personnel may be needed. 


During the course of this meeting, the investigator 
should: 


A. Assess the nature and scope of the investigation through infor- 


mation obtained during the walkthrough and from all available 


personnel. 
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Н. 


. Advise personnel of any secondary devices or other hazards 


found at the scene. 


Ensure that one list of victims/potential witnesses is developed 
and that their accounts of the incident are documented. 


. Ensure that required evidence collection equipment, as well as 


processing and storage facilities, are available. 


Secure required equipment as determined by the scene condi- 
tions, such as light and heavy equipment, handtools, specialty 
equipment, and personal safety items. 


Ensure that sufficient utilities and support services are requested 
(e.g., electricity, food, trash removal, sanitary services, other 
public services, security). 


. Advise emergency responders and the investigation team of their 


assignments for scene documentation and processing. 


Remind personnel that evidence can take many forms; it is not 
limited solely to components of the device(s). 


Summary: The investigator will meet with emergency responders 


and investigative personnel in preparation for scene 
documentation and processing. 


Section 0. Documenting the Scene 


| Develop Written Documentation 


Principle: The investigator will prepare written scene documenta- 
tion to become part of the permanent record. 


Procedure: The investigator should: 


A. Document access to the scene (see the sample access control log 
in appendix A). 


B. Document activities, noting dates and times, associated with the 
incident and the investigation (see the sample activity log in 
appendix A). 


C. Describe the overall scene in writing, noting physical and envi- 
ronmental conditions (e.g., odors, weather, structural conditions) 
(see the sample narrative description in appendix A). 


D. Diagram and label scene features using sketches, floor plans, and 
architectural or engineering drawings. 


E. Describe and document the scene with measuring equipment, 
which may include surveying equipment, GPS (global positioning 
system) technology, or other available equipment. 


Summary: Investigators must prepare written scene documentation 
as part of the permanent record of the incident, which 
will serve as the foundation for any incident reconstruc- 
tions and future proceedings. 


D. Photograph/Videotape the Scene 


Principle: The investigator must ensure that photographic docu- 
mentation is included in the permanent scene record. 
This documentation should be completed prior to the 
removal or disturbance of any items. 
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Procedure: The investigator should: 


A. Record overall views of the scene (e.g., wide angle, aerial, 
360-degree) to spatially relate items within and to the scene and 
surrounding area. (A combination of still photography, video- 
taping, and other techniques is most effective.) 


B. Consider muting the audio portion of any video recording unless 
there is narration. 


C. Minimize the presence of scene personnel in photographs/videos. 
D. Consider photographing/videotaping the assembled crowd. 


E. Maintain photo and video logs (see the sample photographic log 
in appendix A). 


Summary: The investigator will ensure the photographic documen- 
tation of the scene to supplement the written documenta- 
tion in preparation for scene reconstruction efforts and 
any future proceedings. 


5. Locate and Interview Victims 
and Witnesses 


Principle: The investigator will obtain victims’/witnesses’ identi- 
ties, statements, and information concerning their 
injuries. 


Procedure: The investigator should: 


A. Identify and locate witnesses (e.g., victims who may have been 
transported, employees, first responders, delivery/service person- 
nel, neighbors, passers-by) and prioritize interviews. 


B. Attempt to obtain all available identifying data regarding victims/ 
witnesses (e.g., full name, address, date of birth, work and home 
telephone numbers) prior to their departure from the scene. 


C. Establish each witness' relationship to or association with Ше 


scene and/or victims. 


D. Establish the basis of the witness' knowledge: How does the 


witness have knowledge of the incident? 


E. Obtain statements from each witness. 


Е Document thoroughly victims’ injuries and correlate victims’ 


locations at the time of the incident with the seat(s) of the 


explosion(s). 


G. Interview the medical examiner/coroner and hospital emergency 


personnel regarding fatalities and injuries. 


Summary: 


The investigator must attempt to determine the locations 
of all victims and witnesses. Victim and witness state- 
ments and information about their injuries may be 
essential to establishing the nature of the device and 

the circumstances of the incident. 
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Section E. Processing Evidence at ће Scene 


Note: At the time the scene is determined to involve a bombing or 
other crime, the investigator must address legal requirements for 
scene access, search, and evidence seizure. 


Assemble the Evidence 
Processing Team 


Principle: Effective organization and composition of the evidence 


processing team ensure the proper collection and preser- 
vation of evidence. 


Procedure: The size of the evidence processing team depends on 


p= 


J. 


по о тот б с з» 


Ше magnitude of Ше scene, but Ше investigator needs 
to ensure that the following roles and expertise are 
addressed: 


. Bomb disposal technician. 
. Evidence custodian. 
. Forensic specialist. 


. Logistics specialist. 


Medical examiner. 


Photographer (still, digital, video, etc.). 


. Procurement specialist. 


. Safety specialist (structural engineer, etc.). 


Searchers/collectors. 


Sketch artist. 


Summary: Attention to the organization and composition of the 


evidence processing team facilitates effective evidence 
collection and preservation. 


| 
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Organize Evidence Processing 


Principle: Good organization is essential to evidence collection and 


preservation. The investigator must continually evaluate 
the scene, adapt to changes as they occur, and brief the 
team. 


Procedure: Before deploying the team, the investigator should: 


A. Review and reevaluate: 


Ф The boundaries of the scene. 

Ф Safety concerns. 

Ф Command post and staging locations. 

Ф Evidence processing and storage locations. 
@ Personnel and equipment requirements. 


Ф Legal and administrative considerations. 


B. Identify the search procedure for the scene. 


C. Ensure that transient physical evidence has been preserved and 


E. 


collected. 


. Consider onsite explosives detection (e.g., trace explosives 


detection, use of canines, chemical tests) by qualified personnel. 


Brief the team and review assignments. 


Summary: Prior to evidence collection and throughout the process, 


5. 


Ше investigator will review Ше scene, adapt to changes, 
and brief the team. 


Control Contamination 


Principle: Preventing contamination protects the integrity of the 


scene and other search areas, the integrity of the evi- 
dence for forensic analyses, and the safety of personnel. 


Procedure: The investigator should ensure that evidence processing 
personnel: 


A. Use clean protective outergarments and equipment as applicable 
for each scene. 


B. Consider obtaining control samples as applicable (e.g., evidence 
containers, swabs of equipment and personnel). 


C. Package collected evidence in a manner that prevents loss, 
degradation, or contamination. 


D. Package, store, and transport evidence from different scenes or 
searches in separate external containers. 


Summary: Proper collection, packaging, transportation, and storage 
will minimize contamination and ensure the integrity of 
the evidence. 


4 Identify, Collect, Preserve, Inventory, 
Package, and Transport Evidence 


Principle: The search focuses on the discovery of physical evidence 
that may establish that a crime was committed and link 
elements of the crime to possible suspects. 


Procedure: To maximize the recovery and evaluation of all types of 
physical evidence, the investigator should ensure: 


A. The preparation of an evidence recovery log (see the sample in 
appendix A) that documents information such as: 
€ Item number. 

Description. 

Location found (grid number if used). 


Collector's name. 


е + + + 


Markings (either directly on Ше item or indirectly on Ше 
package). 
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Ф 
Ф 


Packaging method. 


Miscellaneous comments. 


B. The identification of evidence by: 


* 
* 


Assigning personnel to designated search areas. 


Initiating scene-specific search pattern(s) and procedures, 
including examination of immobile structures for possible 
evidence. 


Attempting to determine the method of bomb delivery. 
Establishing the seat(s) of the explosion(s), if present. 


Documenting blast effects (e.g., structural damage, bent signs, 
thermal effects, fragmentation). 


Examining the crater, vehicles, structures, etc. 


Documenting the location(s) of victims prior to and after the 
explosion. 


Ensuring that victims are examined for bomb component 
fragments. Autopsies should include full-body x-rays. 


C. The collection of evidence, including: 


D. 


* 


* 


* 


* 


Suspected bomb components and fragments, including those 
recovered from victims. 


Suspected materials used in the construction and transporta- 
tion of the explosive device(s) (e.g., tape, batteries, manuals, 
vehicles). 


Crater material. 


Residues and other trace evidence (using swabbing tech- 
niques). 


Additional items of evidence (e.g., blood, hair, fiber, finger- 
prints, tire tracks, weapons, documents, tools). 


Comparison samples of indigenous materials. 


That evidence is: 


* 
* 
* 
* 
* 


Photographed. 

Packaged and preserved in containers. 

Labeled (e.g., date, collector's initials, item number, location). 
Recorded in the evidence recovery log. 


Secured in the designated storage location. 


E. The labeling, transportation, and storage of evidence Бу: 


€ Placing evidence from different locations or searches in 
separate external containers. 


Ф Labeling evidence for storage and shipment, including 
identification of hazards. 


€ Arranging for transportation of the evidence. 


Summary: Identification, collection, preservation, and packaging of 
evidence must be conducted in a manner that protects the 
item, minimizes contamination, and maintains the chain 
of custody. These steps assist in establishing the ele- 
ments of a possible crime and provide the basis for 
thorough, accurate, and objective investigation and 
prosecution processes. 
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Section Е. Completing and Recording the Scene 


Investigation 


| Ensure That All Investigative Steps 
Are Documented 


Principle: To ensure that the permanent record will be complete, 
the investigator should review all documentation before 
releasing the scene. 


Procedure: The investigator should verify that the following have 
been addressed: 


A. Documentation of major events and time lines related to the 
incident. 

. Personnel access log (see the sample in appendix A). 

. Activity log (see the sample in appendix A). 

. Review of interviews and events. 

. Narrative description of the scene (see the sample in appendix A). 

Photo and video logs (see the sample in appendix A). 


. Diagrams, sketches, and evidence mapping. 


до тот 0 о uw 


. Evidence recovery log (see Ше sample in appendix А). 


Summary: By accounting for all investigative steps prior to leaving 
the scene, the investigator ensures an accurate and 


thorough representation of the scene for the permanent 
record. 
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Ensure That Scene Processing 
Із Complete 


Principle: The scene may be released only upon conclusion of the 


onsite investigation and a thorough evidence collection 
process. 


Procedure: The investigator should perform a critical review of the 


scene investigation with all personnel, to include the 
following actions: 


A. Discuss with team members, including those not present at the 
scene, preliminary scene findings and critical issues that arose 
during the incident. 

B. Ensure that all identified evidence is in custody. 

C. Recover and inventory equipment. 

D. Decontaminate equipment and personnel. 

E. Photograph and/or videotape the final condition of the scene 
just before it is released. 

F. Address legal considerations. 

G. Discuss postscene issues (e.g., forensic testing, insurance 
inquiries, interview results, criminal histories). 

H. Communicate and document postscene responsibilities. 

Summary: The investigator will review the scene investigation to 


ensure that it is complete and that postscene issues are 
addressed. 


5. 


Principle: 


Procedure: 


Release the Scene 


The release of the scene must be documented. The 
investigator should ensure communication of known 
scene-related health and safety issues to a receiving 
authority at the time of release. 


Upon releasing the scene, the investigator should: 


A. Address public health and safety issues by performing the 


following tasks: 


Ф Contacting public utilities. 


Ф Evaluating biological and chemical hazards. 


€ Evaluating structural integrity issues. 


€ Assessing environmental issues. 


B. Identify a receiving authority for the scene. 


C. Ensure disclosure of all known health and safety issues to 


a receiving authority. 


D. Document the time and date of release, to whom the scene 


is being released, and by whom. 


Summary: 


Principle: 


The investigator will ensure communication of known 
health and safety issues to a receiving authority upon 
releasing the scene and will document the release. 


Submit Reports Го the Appropriate 
National Databases 


Detailed technical information regarding explosive 
devices is collected, integrated, and disseminated via 
national databases. These data help authorities identify 
the existence of serial bombers, the sophistication of 
explosive devices being used, and the need for uniform 
procedures and further development of equipment. 
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Procedure: The investigator or authorized agency's administration 
should submit detailed reports to these databases: 


A. Arson and Explosives National Repository (Bureau of Alcohol, 
Tobacco and Firearms). 
B. Bomb Data Center (Federal Bureau of Investigation). 


C. Uniform Crime Reports, National Incident-Based Reporting 
System, and National Fire Incident Reporting System. 


Summary: The investigator contributes to the compilation of 
national databases that identify trends in explosions 
and other incidents involving explosives. 


Appendix A. Sample Forms 


Following are sample forms that can be adapted for use as needed. 


Consent to Search 
Access Control Log 
Activity Log 
Narrative Description 
Photographic Log 


Evidence Recovery Log 


Evidence Control/Chain of Custody 
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CONSENT TO SEARCH 


(Person giving consent) 
having been informed of my constitutional right not to have a search made of my premises 
without a search warrant and of my right to refuse to consent to such a search, do 
authorize Fire or Police Investigator, 


(Name of Investigator) 


or his designee, to conduct a complete search of my premises known as 


(Address of property) 
for the purpose of establishing the cause of the explosion which occurred at my premises 
on 


(Date of explosion) 


| am aware that the search is being conducted to search for evidence of the cause of the 
explosion and | agree to allow the above-named investigator or his designee to take 
photographs/videotapes of the premises, to remove papers, letters, materials, or other 
property, knowing that they may be submitted for forensic examination and testing. 


| am aware that the above-named investigator or his designee will be on the premises for 
a period of time and | have no objection to their entering and remaining on the premises 
for a number of days. This written consent is being given by me voluntarily and without 
threats or promises of any kind. 


| know that | can refuse to give this consent to search and І am waiving that right signing 
this consent. 


Person Giving Consent 


Witness 


Witness 


ACCESS CONTROL LOG 


The completed form is to be turned over to the Investigating Detective. 


Date: Starting Time: Platoon: ОСА or Dispatch #: 
Type of Crime: 
Location of Crime: 
Name Position/Title Time In Time Out 
Remarks: 
Initiated By: Initiating Officer: 
Print Name/Call Sign Signature 
Relieved By: Relieving Officer: 
Print Name/Call Sign Signature 
Date/Time Relieved: Date/Time Completed: 
Date Time Date Time 
Supervisor's Signature: 
Page of 
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EVIDENCE CONTROL/CHAIN OF CUSTODY 


Please Furnish Complete Information 


Agency submitting evidence Date 
Laboratory # 

Delivered by Accepted by 

Suspect(s) Victim(s) 

Offense Place and date of offense 

Agency case # 


Date of hearing, grand jury, trial, or reason why expeditious handling is necessary 


Prev. exams this case Evid. located Report to be directed to 
Yes No Room # 
Copies to Evidence to be returned to 
Mailed Back 
Picked Up by Contributor 


Brief Facts covering case 


Description of evidence Exams requested 


(This space for blocking) 
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STODY (Continued) 


Signature 


Signature 


Reason 


Signature 
Reason 


Signature 
Reason 


REMARKS 
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Encyclopedia of Explosives and Related Items. Vols. 1-10. Dover, 
New Jersey: Picatinny Arsenal, U.S. Army Armament Research and 
Development Command, 1960-83. 
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The ISEE Blaster’s Handbook. 17th ed. Cleveland: International Society 
of Explosives Engineers, 1998. 
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New York: Wiley-VCH, 1993. 


Military Explosives. U.S. Army and U.S. Air Force Technical Manual 
TM 9-1300-214. Washington, D.C.: U.S. Army, 1967. 
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National Fire Protection Association. NFPA 921: Guide for Fire 
and Explosion Investigations. Quincy, Massachusetts: National Fire 
Protection Association. 


Urbanski, T. Chemistry and Technology of Explosives. Vols. 1—4. 
New York: Pergamon Press, 1983. 
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Appendix С. List of Organizations 


During the review process, drafts of this document were sent to the 


following agencies and organizations for comment. While TWGBSI 


considered all comments and issues raised by these organizations, this 


Guide reflects only the positions of its authors. Mention of the reviewers 


is not intended to imply their endorsement. 


Accomack County (VA) Sheriff’s Office 
Alaska State Criminal Laboratory 
American Academy of Forensic Sciences 
American Bar Association 

American Correctional Association 
American Jail Association 

American Prosecutors Research Institute 
American Reinsurance Company 


American Society of Crime Laboratory 
Directors 


American Society of Law Enforcement Trainers 
Anchorage (AK) Police Department 

Arapahoe County (CO) Sheriff’s Office 
Armstrong Forensic Laboratory 

Association of Federal Defense Attorneys 
Bridgeport (MI) Forensic Laboratory 

Bristol (VA) Police Department 

Broward County (FL) Sheriff’s Office 
Brownsville (TX) Police Department 

Bureau of Alcohol, Tobacco and Firearms 
Cameron County (TX) Sheriff’s Office 
Campaign for Effective Crime Policy 

Chicago (IL) Fire Department 

Cincinnati (OH) Fire Division 

City of Donna (TX) Police Department 

City of Inver Grove Heights (MN) Fire Marshal 
Clark County (NV) Fire Department 

Cleveland State College Basic Police Academy 


Commission on Accreditation of Law 
Enforcement Agencies 


Conference of State Court Administrators 
Connecticut State Police Forensic Laboratory 
Conyers (GA) Police Department 
Council of State Governments 

Covington (TN) Fire Department 
Criminal Justice Institute 

Delaware State Fire Marshal’s Office 
Drug Enforcement Administration 
Edinburg (TX) Police Department 
Fairbanks (AK) Police Department 
Federal Bureau of Investigation 


Federal Law Enforcement Training Center, U.S. 
Department of the Treasury 


Florida Department of Law Enforcement 
Florida State Fire Marshal 

Georgia Bureau of Investigation 

Georgia Public Safety Training Center 
Town of Goshen (NY) Police Department 
Harlingen (TX) Police Department 
Hidalgo County (TX) Sheriff’s Office 
Illinois State Police 

Indiana State Police Laboratory 

Institute of Police Technology and Management 
International Association for Identification 


International Association of Bomb Technicians 
and Investigators 


International Association of Chiefs of Police 


International City/County Management 
Association 


Iowa Division of Criminal Investigation 
Laboratory 
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Jefferson Parish (LA) Fire Department 
Juneau (AK) Police Department 

Laredo (TX) Police Department 

Law Enforcement Training Institute 

Los Angeles (CA) Fire Department 

Maine State Police Crime Laboratory 
Massachusetts State Fire Marshal’s Office 
Massachusetts State Police Crime Laboratory 
McAllen (TX) Police Department 

Metro Nashville (TN) Police Department 
Michigan Department of State Police 
Mission (TX) Police Department 

National Association of Attorneys General 
National Association of Black Women Attorneys 
National Association of Counties 


National Association of Criminal Defense 
Lawyers 


National Association of Drug Court Professionals 
National Association of Police Organizations, Inc. 
National Association of Sentencing Commissions 


National Association of State Alcohol and Drug 
Abuse Directors 


National Association of Women Judges 
National Black Police Association 

National Center for State Courts 

National Conference of State Legislatures 
National Council on Crime and Delinquency 
National Crime Prevention Council 

National Criminal Justice Association 
National District Attorneys Association 
National Governors Association 


National Institute of Standards and Technology, 
Office of Law Enforcement Standards 


National Law Enforcement and Corrections 
Technology Centers 


National Law Enforcement Council 


National League of Cities 


National Legal Aid and Defender Association 


National Organization of Black Law Enforcement 
Executives 


National Sheriffs’ Association 


New Hampshire State Police Forensic 
Laboratory 


New Jersey State Police 


New York State Office of Fire Prevention and 
Control 


Orange County (CA) Sheriff’s Department 

Pan American Police Department (Edinburg, TX) 
Peace Officer’s Standards and Training 
Pennsylvania State Police Laboratory 

Pharr (TX) Police Department 

Pinellas County (FL) Forensic Laboratory 
Police Executive Research Forum 

Police Foundation 

Port Authority of NY & NJ Police 

Rhode Island State Crime Laboratory 

St. Louis (MO) Metropolitan Police Department 
San Diego (CA) Police Department 

Sitka (AK) Police Department 

South Carolina Law Enforcement Division 
Suffolk County (NY) Crime Laboratory 
Tennessee Bureau of Investigation 

Tennessee Law Enforcement Training Academy 
Texas Rangers Department of Public Safety 
Tucson (AZ) Police Department 

U.S. Border Patrol 

U.S. Conference of Mayors 

Utah State Crime Scene Academy 

Webb County (TX) Sheriff's Department 
Weslaco (TX) Police Department 

Willacy County (TX) Sheriff's Office 


Wisconsin State Crime Laboratory 


Appendix 0. Investigative and Technical Resources 


Depending on jurisdiction, an investigator’s initial points of contact 


should be his or her State or local fire marshal’s office and/or State 


police. Following is a list of resources that may be useful for further 


investigative or technical information and assistance. This list should 


not be considered all-inclusive. 


A current list of institutions that can provide training in explosion/ 


bombing scene investigation is available from the National Center for 


Forensic Science. 


Bureau of Alcohol, Tobacco and 
Firearms* 


Headquarters Enforcement 
Operations Center 


888–АТЕ-ВОМВ 

202-927-8050 

URL: http://www.atf.treas.gov 

Arson and Explosives National 
Repository 

800-461-8841 

202-927-4590 

Arson and Explosives Programs 
Division 

202-927-7930 

National Laboratory 

301-762-9800 


Chemical Transportation Emer- 
gency Center (CHEMTREC?) 


800-262-8200 
URL: http://www.chemtrec.org 


Environmental Protection 
Agency 

National Response Center 

800-424-8802 


URL: http://www.epa.gov 


Federal Bureau of Investigation* 


Bomb Data Center (preblast 
issues) 


202- 324; 2696 

URL: http://www.fbi.gov 
Explosives Unit (postblast issues) 
202-324-4341 


Federal Emergency Management 
Agency 

U.S. Fire Administration 

202; 447- 1000 


URL: http://ww w.usfa.fema.gov 


Institute of Makers of Explosives 
202-429-9280 
URL: http://www.ime.org 
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International Association of 
Arson Investigators 


314-739-4224 


URL: http://www.fire- 
investigators.org 


International Association 
of Bomb Technicians and 
Investigators 


941-353-6843 
URL: http://www.iabti.org 


International Society of 
Explosives Engineers 


440-349-4004 
URL: http://www.isee.org 


National Center for Forensic 
Science 


407-823-6469 
URL: http://www.ncfs.ucf.edu 


National Fire Protection 
Association 


617-770-3000 
URL: http://www.nfpa.org 


National Institute of Standards 
and Technology 


Building and Fire Research 
Laboratory 


301-975-6850 
URL: http://www.bfrl.nist.gov 


Royal Canadian Mounted Police* 
Canadian Bomb Data Center 
613-993-7880 


URL: http://www.rcmp-grc.gc.ca/ 


U.S. Chemical Safety and Hazard 
Investigation Board 


202-261-7600 
URL: http://www.chemsafety. gov 


U.S. Postal Inspection Service* 

Forensic/Technical Services 
Division 

703-406-7100 


URL: http://www.usps.gov/ 
websites/depart/inspect/ 


* These are sources for criminal investigative assistance. 


